IM THF nn A WINC.S: 



Amend the drawings as shown in red in proposed drawing conection submitted herewith. 
Formal drawings incorporaling these amendments are submitted herewith. 



IN THE SPECIFICATION: 

Amend the specification as indicated below in clean form. A marked-up version of 

amendments submitted in this response is attached hereto. 

Please amend/replace original paragraph 1 1 of the specification as follows: 

{001 Ij Figures 4a and 4b are a flow chart describing the steps for an SSL daemon to 

manage shared SSL sessions. 

Please amend/replace original paragraph 14 of the specificaUon as follows: 
100141 Figures 1 and 2 provide an overview of the elements that comprise an exemplary 

embodiment of the present invention. Figure 1 depicts an SSL daemon, which manages shared 
SSL sessions, receives requests for shared sessions, and acts as a shared session's link to 
applications (described below). The SSL daemon 250 is comprised of an SSL daemon process 
9 ("daemon process"), a shared session 10. ("shared session") and a TCP/IP stack 1 1. The 
daemon process 9 includes program code for managing shared sessions 10 and may encompass 
queue management techniques such as "firet task in the queue - first task out of the queue" 
("FIFO") and highest-priority-first as well as any other software management techniques known 
to one of ordinary skill in the art. The daemon process 9 also includes program code for 
communicating with SSL wrapper processes (described below) and shared sessions 10 using 
SSL application programming interface ("APF') 270 calls. 

Please amend/replace original paragraph 17 of the specification as follows: 
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(00I7I Figure 2 depicts the elements that comprise an application 260 enabled for 
SSL secured communications and enhanced by the present invention. Application 260 
comprises at least one application process 5, aileast ne SSL wrapper process C^wrapper") 6. 
at least one SSL session 7 ("unshared session"), and a TCP/ IP stack 8. Where an application 
process 5 requests an unshared session, the application process 5 utilizes the unshared session 
7 and the TCP/IP stack 8 that are tied to the application process 5. Where an application 
process 5 requests a shared session the application process 5 utilizes the shared session and 
TCP/IP stack that are tied to the daemon process (described in Figure I). 

Please amend/replace original paragraph 18 of the specification as follows: 

[00181 The wr^per process 6 includes program code fiw receiving requests for SSL 

sessions, for determining whether the request is for a shared SSL session or an unshared SSL 
session, for passing requests for unshared SSL sessions to the unshared SSL session 7 tied to 
the applicatton process 5, and for passing requests for shared SSL sessions to a daemon 
process. The wrapper process 6 also includes program code for communicating with 
application process 5. daemon processes, and unshared sessions 7 via SSL API 270 calls. 

Please amend/replace original paragraph 30 of the specification as follows: 

« 

100301 Figures 4a and 4b comprise a flow chart showing steps for sharing an SSL 
session. In figure 4a, an application process passes an SSL_write API call to an SSL 
wrapper process 150. The SSL wrapper process receives the SSL.write API call and any 
accompanying input parameters 152 and uses the input parameter to determine whether the 
application process is requesting a shared or unshared SSL sessiwi 1 54. 

Please amend/replace original paragraph 31 of the specification as follows: 
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[0031 1 If an application process has requested a shared SSL session, the SSL wrapper 

process passes the SSLjvrite API call to an SSL daemon process 156. The SSL daemon 
process passes the SSL^writc API call to a shared SSL session 1 58. The shared SSL session 
encrypts the daU 160 and passes the encrypted data to a TCP/IP stack 1 62. The TCP/IP stack 
packages and sends the encrypted data over a data network 164. As shown in figure 4b, the 
SSL session generates a return code and passes the return code to the SSL daemon process 
which in turn passes a second return code to the SSL wrapper process 166. The SSL wrapper 
process passes a second return code to the application process 168. 

Please amend/replace original paragraph 34 of the specification as follows: 

100341 Returning to figure 4a: If an SSL wrapper process receives a request for a 

separate unshared SSL session, the vmpper process passes the SSL^write API call and any 
accompanying data/input parameters to an SSL session tied to the application process 182. 
The SSL session encrypts the data 1 84 and passes the encrypted data to the TCP/IP stack 1 86. 
The TCP/IP stack packages and sends the encrypted data over a data network 1 88. The SSL 
wrapper receives a return code from the SSL session and passes the return code to the 
application process 190. 

Please amend/replace original paragraph 35 of the specification as follows: 

[0035] In figure 4b, the application process passes an SSL_read API call to the 

wrapper, the wrapper passes the SSL_read API call to the unshared SSL session, the unshared 
SSL session reformats the SSL.read API call into a socket read API call and passes the 
socket read API call to the TCP/IP stack 191 . 

REMARKS 
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